cve.bz

bytecodealliance wasmtime vulnerabilities in 2024, newest first

Filter

By year: all 2026 2025 2024 2023 2022 2021

  1. 2.3CVE-2024-51745EPSS 0.8%

    Wasmtime is a fast and secure runtime for WebAssembly. Wasmtime's filesystem sandbox implementation on Windows blocks access to special device filenames such as "COM1", "COM2", "LPT0", "LPT1", and so on, however it did not block access to …

  2. 2.9CVE-2024-47813EPSS 0.2%

    Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a `wasmtime::Engine`'s internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potent…

  3. 5.5CVE-2024-47763EPSS 0.2%

    Wasmtime is an open source runtime for WebAssembly. Wasmtime's implementation of WebAssembly tail calls combined with stack traces can result in a runtime crash in certain WebAssembly modules. The runtime crash may be undefined behavior if…

  4. 5.5CVE-2024-30266EPSS 0.3%

    wasmtime is a runtime for WebAssembly. The 19.0.0 release of Wasmtime contains a regression introduced during its development which can lead to a guest WebAssembly module causing a panic in the host runtime. A valid WebAssembly module, whe…